Expand description
Cross-file sanitizer-aware validation tracking.
Runs after parsing, before detection. When a function is only ever called
with sanitized arguments, downgrades its parameters’ ArgumentSource from
tainted to Sanitized. This eliminates false positives from internal
helper functions that receive already-validated input from their callers.
Structs§
- Cross
File Result - Result of cross-file sanitization analysis.
Enums§
- Sanitizer
Category - Sanitizer category. A sanitizer is only safe for matching sink types.
Functions§
- apply_
cross_ file_ sanitization - Perform cross-file sanitizer-aware analysis on parsed files.
- is_
redaction_ sanitizer - is_
sanitizer - Check if a function name is a non-redaction input sanitizer. Kept for parser compatibility; redaction helpers are intentionally excluded from this global taint downgrade path.
- sanitizer_
category - Categorize a sanitizer helper by the sink family it protects.
- sanitizer_
label